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(54) Method and apparatus for encrypting and for decrypting data arranged in a data sector 



(57) One type of DVD disc is called DVD ROM and 
intended for use in a DVD ROM drive which is part of a 
PC. The DVD disc suppliers are interested in encrypting 
DVD data in order to prohibit unauthorized use of the 
data. In a computer, the DVD ROM drive has the capa- 
bility to copy data on to another storage media where it 
could be pirated. When encoding a disc, the error cor- 
rection and/or error detection bits (ICP) are exchanged 



with normal data (MD) or data words are replaced by 
transformed data words. The reverse processing is car- 
ried out when replaying the disc. When this scrambled 
data is output from a standard DVD ROM drive, the data 
in the check byte area is lost and the information is not 
useable. 





12 


16 


30 


12HMD 


4MD 


4MD 


ICP 


152 MD 












Fig.4A 



12 16 



CO 
CO 
CO 

in 
in 

CO 

o 

LU 



Printed by Xerox (UK) Business Services 
2.16.3/3.4 



1 



EP 0 855 638 A1 



2 



Description 

The present invention relates to a method and to an 
apparatus for encrypting and for decrypting data 
arranged in a data sector. s 

Background 

There will be DVD (digital versatile disc) discs and 
players on the market soon. Such discs will have a sig- 
nificantly increased data storage capacity when com- 
pared to the well-known CD (compact disc). One type of 
DVD disc is called DVD ROM and intended for use in a 
DVD ROM drive which is part of a PC (personal compu- 
ter). DVD ROMs may carry 'normal' data as well as dig- 
ital TV movie and/or audio data. 

Invention 

The DVD disc suppliers are interested in encrypting 
DVD data in order to prohibit unauthorized use of e.g. a 
movie play on a DVD ROM drive. In a computer, the 
DVD ROM drive has the capability to copy data on to 
another storage media where it could be pirated. 

It is one object of the invention to disclose a method 
for encrypting data arranged in a data sector. This 
object is realised by the method disclosed in claim 1 . 

It is a further object of the invention to disclose a 
method for decrypting data arranged in a data sector. 
This object is realised by the method disclosed in claim 
2. 

It is a further object of the invention to disclose a 
data carrier containing data which are encrypted 
according to the inventive method. This object is real- 
ised by the data carrier disclosed in claim 6. 

It is a further object of the invention to disclose an 
encoding apparatus which utilises the inventive method. 
This object is realised by the apparatus disclosed in 
claim 8. 

It is a further object of the invention to disclose a 
decoding apparatus which utilises the inventive method. 
This object is realised by the apparatus disclosed in 
claim 9. 

When a DVD disc including a special data process- 
ing is replayed on a standard DVD ROM drive the inven- 
tion causes the output of the DVD ROM drive to be 
erroneous, such that the computer cannot use the data. 
According to the invention, when encoding a disc, the 
error correction and/or error detection bits, e.g. RS 
(Reed-Solomon) check bytes, are moved into the nor- 
mal or main data area (and vice-versa when replaying 
the disc). When this scrambled data is output from a 
standard DVD ROM drive, the data in the check byte 
area is lost and the information is not useable. For an 
authorized use, this scrambling is reversed before send- 
ing video and/or audio data to the MPEG (motion pic- 
ture experts group, ISO/IEC 13818 and 1 1 172) decoder 
and AC-3 decoder 3, respectively. This kind of decryp- 



tion requires such a high processing power that for 
many years at least no cheap software-driven processor 
will be able to perform the modified descrambling. It 
would require a pirate to create a hardware modification 
which is difficult to achieve because the decryption cir- 
cuitry is inside an IC and modified hardware would be 
easily detectable and could be subject to legal action. 
Since scrambled or encrypted data could be decrypted 
on a computer theoretically (given enough time and a 
big enough computer), it is preferable to have piracy 
inhibit means that is closer to the disc data. This 
requirement is not for perfect protection, but only to put 
in place something that would require a hardware solu- 
tion to reconstruct the correct data. The invention 
describes a surprisingly simple way to achieve this goal. 
An efficient way to do the encryption is to change the 
order of data stored on the disc as mentioned above. 

In principle, the inventive encoding method is suited 
for encrypting data arranged in a data sector, wherein, 
following an addition of error detection and/or error pro- 
tection data to said data sector, 

data from said data sector are arranged at or re- 
addressed to the location of said error detection and/or 
error protection data, in particular by exchanging it with 
data from said error detection and/or error protection 
data or by a corresponding re-addressing or 

data from said data sector are transformed to 
another representation using a predetermined rule. 

In principle, the inventive decoding method is suited 
for decrypting data arranged in a data sector, wherein, 
following an addition of error detection and/or error pro- 
tection data to said data sector at encoder side, and 

data from said data sector have been arranged at 
or re-addressed to the location of said error detection 
and/or error protection data, in particular by exchanging 
it with data from said error detection and/or error protec- 
tion data or by a corresponding re-addressing or 

data from said data sector have been trans- 
formed to another representation using a predeter- 
mined rule, 

at decoder side said arranging at or re-address- 
ing to the location of said error detection and/or error 
protection data is reversed correspondingly or said 
transformation is reversed by a corresponding predeter- 
mined rule and said error detection and/or error protec- 
tion data is applied to said data sector data. 

Advantageous additional embodiments of the 
inventive methods are disclosed in the respective 
dependent claims. 

In principle the inventive apparatus for encrypting 
data arranged in a data sector includes: 

means for adding error detection and/or error pro- 
tection data to said data sector, 
means for arranging or re-addressing data from 
said data sector to the location of said error detec- 
tion and/or error protection data, in particular by 
exchanging it with data from said error detection 
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and/or error protection data or by a corresponding 
re-addressing or 

means for transforming data from said data 
sector to another representation using a predeter- 
mined rule. 5 

In principle the inventive apparatus for decrypting 
data arranged in a data sector, wherein, following an 
addition of error detection and/or error protection data to 
said data sector at encoder side, 10 

data from said data sector have been arranged at 
or re-addressed to the location of said error detection 
and/or error protection data, in particular by exchanging 
it with data from said error detection and/or error protec- 
tion data or by a corresponding re-addressing or is 

data from said data sector have been trans- 
formed to another representation using a predeter- 
mined rule, includes: 

means for reversing correspondingly said arranging 20 
or re-addressing to the location of said error detec- 
tion and/or error protection data or 

means for reversing said transformation by a 
corresponding predetermined rule, 
means for applyi ng said error detection and/or error 25 
protection data to said data sector data. 

Drawings 

Preferred embodiments of the invention are 30 
described with reference to the accompanying draw- 
ings, which show in: 

Fig. 1 simplified block diagram of a DVD player; 

Fig. 2 address generation means; 35 

Fig. 3 data exchange in a recording sector accord- 
ing to a first embodiment of the invention; 

Fig. 4 data exchange in rows of a recording sector 
according to the first embodiment of the 
invention; 40 

Fig. 5 recording sector configuration in more detail; 

Fig. 6 data exchange encoder according to a sec- 
ond embodiment of the invention; 

Fig. 7 data exchange decoder for the second 

embodiment of the invention. 45 

Preferred embodiments 

The data are arranged on the disc as physical data 
sectors. In order to construct such physical data sectors so 
the following procedure is carried out. The original data 
(main data) to be recorded become arranged in data 
sectors containing the main data and some additional 
information like ID (identification) data and EDC (error 
detection code). The data sectors may be arranged in ss 
e.g. 12 rows by 172 bytes blocks. The ID data can be 
located at the beginning of the first row. The EDC data 
can be located at the end of the last row. These 2064-bit 



4 

blocks or data sectors may undergo a first scrambling 
process for the 2048-bit main data contained therein, for 
example by using a feedback shift register with an 
Exclusive-OR logical operation. E.g. each 16 of the 
resulting data sectors may be combined in order to form 
a recording sector, following an ECC (error correction 
code) encoding of the group of data sectors. 

The recording sector or ECC block configuration is 
shown in Fig. 3A more generally and in Fig. 5 in more 
detail. A cross RS error correction code is applied to the 
group of 16 data sectors, having in total 192 rows RO 
and 172 columns CO of bytes. Thereby the ECC block 
gets a supplement consisting of an outer-code parity 
OCP and an inner-code parity ICR The OCP may con- 
sist of 16 additional rows of 1 72 bytes each. The subse- 
quent ICP may consist of 208 columns of 10 additional 
bytes each. OCP and ICP can be calculated using 
remainder polynomials. 

The inner-code parity ICP has a minimum distance of 
e.g. d=1 1 . This means that the inner RS parity code can 
be used to correct up to five errors only. If there are 
more than five errors, the related code is uncorrectable 
and is marked as 'bad' data. 

The outer-code parity OCP has a minimum distance of 
e.g. d=1 7. This means that the outer RS parity code can 
be used to correct up to eight errors only. If there are 
more than eight errors, the related code is uncorrecta- 
ble and is marked as 'bad' data. 

Thereafter a row interleaving step may be added 
wherein in each case one of the 16 OCP rows is 
inserted in a different order e.g. below the last row of 
each data sector partition SecO to Sec15. This step is 
not depicted in Fig. 3A and B. 

In the invention, e.g. all or only some of the ICP bits 
or bytes of a row - preferably together with some e.g. 
adjacent bits or bytes of the main data - are exchanged 
with a corresponding number of bits or bytes of main 
data in that row or another row. The scrambling can be 
performed for every row or not for all rows of a sector, in 
each row concerned in the same area or not in the 
same area, in every sector partition or not in every sec- 
tor partition. 

When decoding in a DVD ROM player, this scrambling 
of data is reversed. 

The main scrambling condition is that the data is modi- 
fied in a way that a decoder not carrying out the 
reversed address transformation ADTR outputs rubbish 
because, instead of ICP data, 'lost' data LD only are 
used for the ECC process at decoder side, see Fig. 3B. 
That condition is fulfilled if a number of errors is intro- 
duced artificially which is higher than the number of cor- 
rectable errors. Because the error correction data ICP 
and/or OCP are included in the data re-ordering there is 
practically no way, neither in the inner nor in the outer 
ECC processing, to reconstruct the data. If the parity 
symbol (or the data which was meant to be the parity 
symbols) is 'destroyed' prior to RS-decoding, it cannot 
be corrected. Without specifically designed hardware 
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the encryption is not breakable. 

Before forming a physical sector, sync codes can 
be added to the recording sector data and ECC block 
data, respectively. In addition, a channel modulation can 
be added, e.g. by converting 8-bit input data to 16-bit s 
channel code words using one or more conversion 
tables. 

One possible re-ordering in an ECC-block after row 
interleaving for each sector is: 

0yferi,i6..i67 => Byteri,30..i8i , Byte r1i168 ..i 81 => 10 
Byfe r1)16 .. 29 

Byte r2>0 .A67 => Syte, 2 ,i4..i8i > Syte r2i168 ..i 81 => 
Syfe r2|0 ..i3 

where r1 = row 0 to 3 in a data sector partition and r2 = 
row 4 to 1 1 or 12 in that data sector partition of the cur- is 
rent recording sector. 

It is also possible to shift OCP data and main data in the 
vertical direction only or in addition to the above 
described horizontal shifting. This would increase the 
level of encryption but would also increase the hardware 20 
complexity. 

Fig. 2 shows a block diagram for address calcula- 
tion. Address calculation circuit ACAL contains the 
inventive address reordering. ACAL is controlled by 
symbol counter means SCOU and row counter means 25 
RCOU, both of which receive respective control signals 
CTRL from a central control processor. For the corre- 
sponding descrambling at decoder side the original 
address generation for data input to a RAM memory in 
a recording channel IC is carried out with e.g. the follow- 30 
ing formulas: 



wherein SN is a symbol number in the row, RN is a row 
number and RNP are rows containing OCP parity data. 
Based on a certain RAM configuration, for rows with 
parity data the address is: 40 

RAM-address = ((RNP-12)/13 + 192)*256 + SN 
and for rows with main data the address is: 
RAM-address = ((RN - INT(RN/13))*256 + SN 

45 

For the same RAM configuration, the inventive 
addresses can be generated as follows: 
For rows RN=0 to RN=3 of a current data sector parti- 
tion of a current recording sector the last four data sym- 
bols plus the ten ICP parity symbols are shifted from the so 
end of the row to the left part of the row. 



IF (SN < 16) 

SN1 = SN 
ELSE IF (SN < 30) 

SN1 = SN + 152 
ELSE 

SN1 = SN - 14 
END IF 

wherein SN1 is the symbol number needed for the 
descrambling according to the invention. 
In a channel demodulation step e.g. 16-bit input data 
words are converted using a look-up table into 16-bit 
output data words containing 8 bits of valid data and 8 
bits of invalid data (i.e. data which is marked as being 
invalid) which are stored in the RAM together with the 
valid data. The data can be marked as being invalid or 
valid, respectively, using erasure data bytes in which 
each bit corresponds to a byte from the channel demod- 
ulation output and defines whether that channel demod- 
ulation output byte is valid or not. The erasure byte 
addresses are denoted SNE. Since the row length of 
182 bytes divided by 8 gives 22 and a rest of 6, one 
needs 22 erasure bytes and one 6-bit erasure word for 
a row. Without using the invention, for the same RAM 
configuration SNE would equal SN/8 for all SN numbers 
of the row. At the end of a row one 6-bit erasure word 
would be arranged. 

Advantageously, the SNE calculation is not signifi- 
cantly more complex if the invention is used. For SN=0 
to SN=29 SNE equals SN/8 and for SN=30 to SN=181 
SNE equals (SN+2)/8. The 6-bit erasure word is stored 
under address SN=29. Therefore the original storage 
arrangement of one 6-bit erasure word per row is kept. 
The new SNE value SNE1 can be calculated with the 
following formula: 

IF (SNE < 2) 

SNE1 = SNE 
ELSE IF (SNE < 4 ) 

SNE1 = SNE +19 
ELSE 

SNE1 = SNE - 2 
ENDIF 



SN=[0..181], 
RN = [0..207] 

RNP = [12+0*13, 12+1*13, 12+2*13 12+15*13 35 



50 
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For rows RN=4 to RN=1 1 or 12 of the current data 
sector partition of a current recording sector the last four 
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main data symbols plus the ten I CP parity symbols are 
shifted to the very first beginning of the row. 

IF (SN < 14) 

SN2 = SN + 168 

ELSE 

SN2 = SN - 14 

ENDIF 

wherein SN2 is the symbol number needed for the 
descrambling according to the invention. 
For SN=0 to SN=13 SNE equals SN/8 and for SN=14 to 
SN=181 SNE equals (SN+2)/8. The 6-bit erasure word 
is stored under address SN=13. Therefore the original 
storage arrangement of one 6-bit erasure word per row 
is kept. 

The new SNE value SNE2 can be calculated with the 
following formula: 

IF (SNE < 2) 

SNE2 = SNE +21 

ELSE 

SNE2 = SNE - 2 

ENDIF 

For rows RNP with parity data the RAM address is 
(for the same RAM configuration): 

RAM-address = ((RNP-12)/13+192)*256 + SN2 

For non-parity data rows of the replayed recording sec- 
tor the RAM address is: 
For (RN modulo 13) < 4: 

RAM-address = ((RN - INT(RN/13))*256 + SN1 

and for (RN modulo 13)£ 4: 

RAM-address = ((RN - INT(RN/13))*256 + SN2 

wherein INT means integer division. 

If the OCP row interleaving was not carried out at 

encoder side the number '13' is replaced by the number 

'12'. 

As mentioned above, the descrambling may be car- 
ried out in some e.g. upper data sector partitions only of 
a recording sector, corresponding to the scrambling on 
encoding side. 

The corresponding descrambling at decoder side is 
depicted in Fig. 4Afor codewords in row RN=0 to RN=3 
of the current data sector and in Fig. 4B for codewords 
in rows RN=4 to RN=1 1 or 12 of the current data sector. 



Although the first row only of a data sector may contain 
identification or header data which should not be sub- 
ject to scrambling, the scrambling / descrambling 
according to the invention can be carried out e.g. in the 
5 upper four rows of a data sector partition differently from 
the remaining rows of that data sector. This will increase 
the level of encryption. 

The upper row in Fig. 4A represents scrambled data 
and contains a sequence of 12 header data bytes HMD 

10 for main data, 4 main data bytes MD, 4 shifted main data 
bytes MD, 10 shifted ICP bytes, and 152 shifted main 
data bytes MD. The lower row represents descrambled 
data and contains a sequence of 12 header data bytes 
HMD for main data, 4 main data bytes MD, 152 re- 

15 shifted main data bytes MD, 4 re-shifted main data bytes 
MD, and 10 re-shifted ICP bytes. The upper row in Fig. 
4B represents scrambled data and contains a sequence 
of 4 shifted main data bytes MD, 10 shifted ICP bytes, 
and 1 68 shifted main data bytes MD. The lower row rep- 

20 resents descrambled data and contains a sequence of 
168 re-shifted main data bytes MD, 4 re-shifted main 
data bytes MD, and 10 re-shifted ICP bytes. 

In Fig. 1 a DVD ROM disc D is driven by a disc 
motor DM. The information from the disc is read by a 

25 laser pick-up PI which provides servo control data to 
servo means SER and information including physical 
sector data to decoding means DEM. SER and the 
other blocks following and including DEM can be con- 
trolled by a microprocessor julR Servo means SER con- 

30 trol the speed of DM and the position of PI. In DEM a 
processing takes place which is the inverse to the 
encoding steps described above, i.e. synchronization 
and channel demodulation, descrambling according to 
the invention, OCP row de-interleaving step if carried 

35 out when encoding, ECC processing, 2048-bit main 
data descrambling if carried out when encoding, EDC 
processing, and ID and main data processing. In the 
channel demodulation step e.g. 16-bit input data words 
are converted using a look-up table into 16-bit output 

40 data words containing 8 bits of valid data and 8 bits of 
erasure data as mentioned above which together are 
stored in a RAM area. 

The DEM output data pass through a bit buffer BUF to a 
demultiplexer DMUX which delivers the related parti- 

45 tions of the input data stream to an audio data decoder 
AD outputting the audio signal or signals AS, to a video 
data decoder VD, and to a subpicture data decoder SD. 
Output signals of VD and SD are combined in a multi- 
plexer MUX which provides a video signal VS. 

so An item of information concerning the presence of 
the inventive encryption can be inserted into the disc 
directory or into header data of the DVD disc. Such disc 
directory / header data is not scrambled. This allows 
any DVD player to evaluate that item of information with- 

55 out being able to decrypt the main data. Advanta- 
geously, the DVD player can signal the evaluation result 
on its display or to a PC. 

Also in the second embodiment of the invention the 
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data are changed after RS encoding and inversely 
changed at decoder side before RS decoding. In this 
embodiment, each code word contains uncorrectable 
errors and prevents a standard DVD player from cor- 
rectly processing the data read from the disc. 5 
At encoder side the input data ID pass through an RS 
encoder RSE as depicted in Fig. 6. The output of RSE 
is connected to a Galoi field multiplier GFM the output 
signal of which is processed as described for the first 
embodiment before recording it on the disc D. RSE and w 
a flip-flop FF are clocked by a byte clock BCLK. FF can 
be reset using signal RES. The inverted output of FF is 
connected to the data input of FF. The FF output con- 
trols a multiplexer MUX the output of which supplies the 
second input of GFM. GFM multiplies or transforms the 15 
data at its first input with either a coefficient a0 (Galoi's 
field element) or a coefficient cc199 (Galoi's field ele- 
ment). FF synchronizes the symbol stream with GFM. 
Each current odd symbol or byte of a code word is 
divided by Galoi's element a255 which corresponds to a 20 
multiplication with «0. 

Each current even symbol or byte of a code word is 
divided by Galoi's element 066. This corresponds to a 
multiplication with «199. This operation introduces at 
least 91 errors into each ICP code word of a row which 2 s 
leads to uncorrectable ICP code words being recorded 
on disk D. 

In order to reconstruct the original representation of 
data, a correspondingly inverse processing or transfor- 
mation is performed at decoder side. The disc data is 30 
processed as described for the first embodiment before 
passing it through a Galoi field multiplier GFM to an RS 
decoder RSD as shown in Fig. 7. RSD receives also the 
byte clock BCLK and outputs the RS decoded signal 
OD. Again, the second input of GFM is supplied from 35 
the output signal of a multiplexer MUX. MUX connects 
either the coefficient a0 (Galoi's field element) or the 
coefficient a56 (Galoi's field element) to the second 
input of GFM. Flip-flop FF is connected like in Fig. 6 and 
synchronizes the symbol stream with GFM. 40 
Each current even symbol or byte of a code word is mul- 
tiplied by Galoi's element a56. 
Each current odd symbol or byte of a code word is mul- 
tiplied by Galoi's element otO. 

To be able to re-synchronize the decoder in case of 45 
failure (for example if the byte clock is missing) the reset 
input of FF is ORed with the logical output of an AND 
gate or function which receives as input signals a first 
row signal FRO, a first byte signal FBY and the byte 
clock BCLK. Advantageously, the additional amount of so 
hardware is very small in the second embodiment of the 
invention. 

Advantageously, the data reordering can be per- 
formed in many other combinations. This allows to have 
a different encryption type for different types of data 55 
media or for different data media suppliers. 

The invention is not limited to the use in connection 
with DVD ROM discs. It can also be used for other data 



media or data transmission like other DVD type discs 
and players, CDs, CD players, digital data tapes, digital 
tape recorders, data broadcasting. 

Claims 

1 . Method for encrypting data arranged in a data sec- 
tor, characterised in that, following an addition of 
error detection and/or error protection data to said 
data sector, data from said data sector are 
arranged at or readdressed to (ACAL) the location 
of said error detection and/or error protection data, 
in particular by exchanging it with data from said 
error detection and/or error protection data or by a 
corresponding re-addressing or data from said data 
sector are transformed (GFM, MUX, FF) to another 
representation using a predetermined rule. 

2. Method for decrypting data arranged in a data sec- 
tor, characterised in that, following an addition 
(RSE) of error detection and/or error protection 
data to said data sector at encoder side, 
wherein data from said data sector have been 
arranged at or re-addressed to (ACAL) the location 
of said error detection and/or error protection data, 
in particular by exchanging it with data from said 
error detection and/or error protection data or by a 
corresponding re-addressing or 

wherein data from said data sector have been 
transformed (GFM, MUX, FF) to another represen- 
tation using a predetermined rule, 
at decoder side said arranging at or re-addressing 
to the location of said error detection and/or error 
protection data is reversed (DEM; RSD) corre- 
spondingly or said transformation is reversed by a 
corresponding predetermined rule and said error 
detection and/or error protection data is applied to 
said data sector data. 

3. Method according to claim 1 or 2, wherein said 
error detection and/or error protection data is Reed 
Solomon data. 

4. Method according to any of claims 1 to 3, wherein 
said data sector is arranged or addressed in a two- 
dimensional format and said error detection and/or 
error protection data is inner-code parity data 
and/or outer-code parity data. 

5. Method according to any of claims 1 to 4, wherein 
said data sector has an addition of inner-code par- 
ity data and outer-code parity data, but said arrang- 
ing or re-addressing is carried out or carried out 
inversely on said inner-code parity data only. 

6. Data carrier, data of which is encoded using a 
method according to any of claims 1 and 3 to 5. 
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7. Data carrier according to claim 6 which is a DVD 
disc, in particular a DVD ROM disc. 

8. Apparatus for encrypting data arranged in a data 
sector, and including: 5 

means (RSE) for adding error detection and/or 
error protection data to said data sector, 
means (ACAL) for arranging or re-addressing 
data from said data sector to the location of 10 
said error detection and/or error protection 
data, in particular by exchanging it with data 
from said error detection and/or error protec- 
tion data or by a corresponding re-addressing 
or means (GFM, MUX, FF) for transforming is 
data from said data sector to another represen- 
tation using a predetermined rule. 

9. Apparatus for decrypting data arranged in a data 
sector, wherein following an addition of error detec- 20 
tion and/or error protection data to said data sector 

at encoder side, 

data from said data sector have been arranged at or 
re-addressed to the location of said error detection 
and/or error protection data, in particular by 25 
exchanging it with data from said error detection 
and/or error protection data or by a corresponding 
re-addressing or data from said data sector have 
been transformed to another representation using a 
predetermined rule, 30 
and including: 

means (ACAL) for reversing correspondingly 
said arranging or re-addressing to the location 
of said error detection and/or error protection 35 
data or 

means (GFM, MUX, FF) for reversing said 
transformation by a corresponding predeter- 
mined rule, 

means (DEM; RSD) for applying said error 40 
detection and/or error protection data to said 
data sector data. 
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